jetlib.sec » Tags » phpids

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

6 items tagged "phpids"

Related tags: code execution [+], vulnerability [+], steping stone [+], remote [+], paper [+], inclusion [+], file [+], end result [+], bypassing [+], path [+], ip spoofing [+], intrusion detection system [+], injection [+], information leakage [+], disclosure [+], crlf [+]

• August 29, 2011
• 13:39

  PHP Intrusion Detection System (PHPIDS) CRLF Injection, XSS, IP Spoofing, LFI Attack Vulnerabilityes

   » ‎ SecuriTeam
  PHPIDS is vulnerable to CRLF Injection, XSS, IP Spoofing and LFI Attacks. This is a very critical break, not only is all of the protection provided by PHPIDS bypassed, but PHPIDS can help the attacker achieve remote code execution. So in fact, running this version of PHPIDS made you less secure.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  injection phpids crlf intrusion-detection-system ip-spoofing code-execution  

• August 26, 2011
• 11:15

  Bypassing PHPIDS 0.6.5

   » ‎ Packet Storm Security Recent Files
  Using the attacks in this paper allows you to bypass all of PHPIDS's rule sets, which defeats all protection PHPIDS can provide. Furthermore, on a default install of PHPIDS the log file can be used to drop a PHP backdoor. This can use PHPIDS as a vital steping stone in turning an LFI vulnerability into remote code execution. The end result is that use of PHPIDS 0.6.5 can make you less secure. All of these issues have been fixed in version 0.7.

  Tags:  bypassing phpids paper steping-stone code-execution end-result  

• 11:15

  Bypassing PHPIDS 0.6.5

   » ‎ Packet Storm Security Misc. Files
  Using the attacks in this paper allows you to bypass all of PHPIDS's rule sets, which defeats all protection PHPIDS can provide. Furthermore, on a default install of PHPIDS the log file can be used to drop a PHP backdoor. This can use PHPIDS as a vital steping stone in turning an LFI vulnerability into remote code execution. The end result is that use of PHPIDS 0.6.5 can make you less secure. All of these issues have been fixed in version 0.7.

  Tags:  bypassing phpids paper steping-stone code-execution end-result  

• March 03, 2011
• 4:12

  PHPIDS 0.6.5 Path Disclosure / Information Leakage

   » ‎ Packet Storm Security Exploits
  PHPIDS versions 0.6.5 and below suffer from a path disclosure and information leakage vulnerabilities.

  Tags:  path disclosure phpids information-leakage  

• February 17, 2010
• 7:32

  PHPIDS 0.4 - Remote File Inclusion Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PHPIDS 0.4 - Remote File Inclusion Vulnerability

  Tags:  phpids file remote vulnerability inclusion  

• February 07, 2010
• 13:00

  PHPIDS 0.4 - Remote File Inclusion Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  PHPIDS 0.4 - Remote File Inclusion Vulnerability

  Tags:  phpids file remote vulnerability inclusion